Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier: jronoAQOrbOJNudnJkbj4/EO1E1LBcVDgFm7aANemIA=
Subject key identifier: 2B:FB:65:03:3F:87:26:AF:68:3D:36:86:BD:F2:C4:7D:61:01:A7:23
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial: 019A711374D40FCFF94621C0D68A38B40089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number: 0FEB
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: Kgt/lC9QTNiYUeG8AHeCI96xwcBxi2v31RIgenj7+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:74:d4:0f:cf:f9:46:21:c0:d6:8a:38:b4:00:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=2bfb65033f8726af683d3686bdf2c47d6101a723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:ea:0b:ed:a5:a2:c5:f3:25:fd:08:f6:ad:
7d:ea:88:a7:48:a5:9c:51:88:99:b8:a7:61:b0:06:
d7:7a:b9:60:0e:f6:00:22:65:d3:54:63:34:4b:32:
74:63:5a:f9:d6:58:12:75:49:b3:d9:54:5f:a9:9d:
3f:8b:96:d7:09:ac:a0:cb:e5:7d:d5:7d:57:bb:ac:
0c:37:64:b7:bf:07:f6:9f:ad:a8:d9:02:3f:ff:f2:
16:e3:dd:95:a1:5f:b7:49:df:12:7d:b2:5f:5f:34:
fb:09:7d:cd:7f:8e:95:6c:28:c7:61:6e:2e:e2:bc:
2b:27:19:5d:24:01:7d:43:aa:7e:f8:32:15:fc:ab:
1d:40:29:67:53:0f:f7:cf:65:5c:c1:6d:63:82:70:
74:9f:c3:40:d4:d6:60:5d:68:99:74:ca:9f:a8:79:
d1:b4:97:dc:dc:6b:1c:a2:c9:84:0b:38:61:fa:ad:
02:e7:8e:ae:3e:a3:ed:20:f5:ae:68:b6:72:2e:16:
8b:80:6a:ce:bf:dd:e8:be:f9:1a:92:4b:75:dc:8f:
04:f2:22:1e:db:23:20:81:cb:e1:42:e9:60:a7:68:
79:86:df:b3:cf:6a:8e:7f:34:88:6f:57:0e:60:b2:
fa:53:7c:3d:6b:17:ca:7c:96:91:29:b3:24:41:9f:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:65:03:3F:87:26:AF:68:3D:36:86:BD:F2:C4:7D:61:01:A7:23
X509v3 Authority Key Identifier:
keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c4:66:e0:37:07:a2:f2:29:2e:fb:99:25:44:fc:8b:3c:7e:
3b:15:1a:08:99:61:93:c4:f6:f5:4a:43:9a:45:59:6d:44:97:
5d:50:44:1a:81:c8:74:b6:0e:63:fb:41:b2:cd:fa:de:c0:cb:
02:6c:63:13:e6:6b:fa:c7:a0:28:3c:09:7b:5b:ea:1b:6f:68:
f4:c9:95:39:a5:22:c6:03:30:35:61:87:ef:a5:09:f6:e0:81:
43:6c:0d:75:1e:e5:70:5e:d3:68:cd:cd:58:29:91:c6:53:e9:
58:53:ac:65:9a:59:1f:4e:a9:d6:71:03:ac:1c:00:76:24:5a:
fb:78:d6:f5:0c:29:38:f4:6a:b2:a4:4d:72:16:ea:60:bb:91:
ab:5f:fa:66:ed:c8:b2:27:d4:45:70:6f:3c:fd:c8:2c:e0:ae:
5f:ef:17:3c:a6:d0:23:dc:b5:7c:5a:04:33:c5:87:ea:ca:cd:
af:fe:94:6b:66:e6:ac:80:d2:7d:0e:c0:86:16:c0:1a:79:9b:
6f:a8:e7:bf:6d:00:bc:10:4f:e5:7d:db:a3:07:a8:3f:96:24:
86:ff:4e:88:3a:6a:dd:67:72:bd:8d:62:95:f0:3a:d2:83:24:
70:d5:12:c4:60:a1:d7:28:51:68:70:d7:3d:d1:26:74:c3:21:
be:d6:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:09 2025 by rpki-client